921 reputation
311
bio website serverfault.com/users/148325/…
location St. Petersburg, Russia
age 24
visits member for 1 year, 7 months
seen Apr 19 at 5:51

I'm a systems administrator in a hosting company.


Feb
20
comment Setting up IP masquerading by passing packets through external nodes
No, I mean - if you have a website on your root server (as far as i see on a diagram), it means you are listening port 80. In such case, you definitely cannot control who would be trying to connect to your server through port 80. However, if you aren't listening on any port or if you want to have incoming connections only from known host, there is a decision.
Feb
20
comment Setting up IP masquerading by passing packets through external nodes
Does your root server provide service to the world? In such case you can not prevent it from being say DDoSed in this way.
Feb
20
answered Setting up IP masquerading by passing packets through external nodes
Feb
20
comment How to portforward with iptables?
Issue iptables -t nat -n -L -v and you will see your rule added to PREROUTING chain of nat table.
Jan
11
comment Prevent users to access to website using port 8080 (apache) when using Varnish (on port 80)
I've just edited the answer and included the example.
Jan
11
answered Prevent users to access to website using port 8080 (apache) when using Varnish (on port 80)
Jan
9
answered Trying to SSH in to remote computer but still asking for password
Jan
9
answered 'No space left on device' on mounted NFS device
Dec
5
awarded  Teacher
Dec
5
answered Why do we need logical addressing